This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e35372e302f32342d3234203d3e20323132323338.roa File: 38352e3135382e35372e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: YyETXN3H9CPITgewrS7CgLdige4mtjPAS9uScdAv5g4= Subject key identifier: D2:36:49:C4:E5:52:5E:93:6F:6D:6A:8F:2E:91:2D:A0:36:9A:4C:D4 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 1BF6226A84E3F0D9ACD690678AE6CA03F7A39A6B Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e35372e302f32342d3234203d3e20323132323338.roa Signing time: Sat 13 Dec 2025 09:11:31 +0000 ROA not before: Sat 13 Dec 2025 09:06:31 +0000 ROA not after: Sat 12 Dec 2026 09:11:31 +0000 asID: 212238 IP address blocks: 85.158.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f6:22:6a:84:e3:f0:d9:ac:d6:90:67:8a:e6:ca:03:f7:a3:9a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:31 2025 GMT Not After : Dec 12 09:11:31 2026 GMT Subject: CN=D23649C4E5525E936F6D6A8F2E912DA0369A4CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5f:72:12:9a:ac:a9:15:23:07:07:26:e9:5f: 2d:c0:ea:d1:01:c6:52:6b:71:70:2e:65:aa:ed:bc: 66:93:ea:9b:53:a2:7a:80:c1:5b:ff:3f:ac:fe:16: 1c:ea:ab:56:fa:e5:b6:e0:b5:e7:66:62:94:b1:50: 71:49:4a:f0:ad:eb:a1:0d:1c:c9:04:2b:c1:39:9c: ba:13:f5:5a:c0:2c:2a:25:db:44:de:85:3d:c3:7a: 92:21:5b:38:2c:ba:5b:f5:4a:a7:88:70:28:37:73: ab:3e:07:3b:4f:ab:7e:31:3c:04:f0:14:95:84:0b: 32:ee:97:3e:a2:8c:67:f8:d6:21:d1:6c:b6:34:2f: 4c:f8:3c:20:b3:94:5c:e7:13:e6:31:63:3d:2e:ca: 64:40:d5:75:84:c4:48:40:b0:7d:80:73:84:cb:ac: e6:25:ae:d9:ed:48:e3:22:93:7d:a7:1f:08:7c:9d: dc:41:a6:3b:fa:d6:9b:1c:22:76:61:90:5d:d6:a4: cb:b2:93:1c:ed:da:10:8b:0a:96:d6:59:67:0c:e6: 55:11:08:b5:67:56:bb:70:80:5f:af:e2:7f:9b:b1: 10:40:19:bf:7b:71:e6:c6:97:61:ba:ca:92:0d:b0: ab:54:90:22:51:da:fb:92:81:d0:65:3e:41:33:cb: d6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:36:49:C4:E5:52:5E:93:6F:6D:6A:8F:2E:91:2D:A0:36:9A:4C:D4 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e35372e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.57.0/24 Signature Algorithm: sha256WithRSAEncryption 97:ab:72:6d:f0:51:68:5a:f4:7d:6f:67:c9:dd:be:96:b9:00: 66:47:93:e7:ca:a0:28:dd:76:47:10:63:58:30:db:28:59:a1: 86:02:dc:85:40:36:a1:90:90:41:b8:73:38:cf:54:02:bf:13: 46:c4:30:dc:4b:32:fc:bb:64:96:85:d0:4c:7e:d4:2e:1e:3b: 1e:41:83:c4:a5:82:ae:83:3a:64:2f:6c:b2:a9:1b:3a:f0:72: 63:67:6c:02:1b:d0:9d:bb:81:c5:3a:9f:00:29:e8:4a:71:b1: 2e:21:9d:38:84:45:66:cf:02:16:96:4e:9d:46:c9:04:71:e6: 4e:66:7c:e1:68:84:48:a5:d2:a4:f0:ec:41:f1:0b:6b:ee:db: f2:11:4c:df:34:19:71:4b:09:29:eb:f1:ca:46:ab:25:9f:b0: 45:5e:0c:fd:d3:66:b5:fb:81:10:3f:86:dd:21:d4:34:f5:f2: 69:99:7e:3f:72:ef:48:0b:22:63:4a:dc:51:36:a5:c4:f5:e7: 5a:f0:1b:97:a2:eb:8e:3b:30:11:4a:15:4d:b1:a4:31:ac:bb: 85:d8:85:8d:c6:1c:74:0e:0d:9d:0d:96:43:df:3f:bb:41:d7: 25:f5:d6:5d:73:9f:87:5b:54:7f:1b:76:63:ca:f1:8f:f4:91: 49:aa:8a:fc -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUG/YiaoTj8Nms1pBniubKA/ejmmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzFaFw0yNjEyMTIwOTExMzFaMDMxMTAvBgNV BAMTKEQyMzY0OUM0RTU1MjVFOTM2RjZENkE4RjJFOTEyREEwMzY5QTRDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqX3ISmqypFSMHBybpXy3A6tEB xlJrcXAuZartvGaT6ptTonqAwVv/P6z+Fhzqq1b65bbgtedmYpSxUHFJSvCt66EN HMkEK8E5nLoT9VrALCol20TehT3DepIhWzgsulv1SqeIcCg3c6s+BztPq34xPATw FJWECzLulz6ijGf41iHRbLY0L0z4PCCzlFznE+YxYz0uymRA1XWExEhAsH2Ac4TL rOYlrtntSOMik32nHwh8ndxBpjv61pscInZhkF3WpMuykxzt2hCLCpbWWWcM5lUR CLVnVrtwgF+v4n+bsRBAGb97cebGl2G6ypINsKtUkCJR2vuSgdBlPkEzy9aRAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU0jZJxOVSXpNvbWqPLpEtoDaaTNQwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzEzNTM4MmUzNTM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA VZ45MA0GCSqGSIb3DQEBCwUAA4IBAQCXq3Jt8FFoWvR9b2fJ3b6WuQBmR5PnyqAo 3XZHEGNYMNsoWaGGAtyFQDahkJBBuHM4z1QCvxNGxDDcSzL8u2SWhdBMftQuHjse QYPEpYKugzpkL2yyqRs68HJjZ2wCG9Cdu4HFOp8AKehKcbEuIZ04hEVmzwIWlk6d RskEceZOZnzhaIRIpdKk8OxB8Qtr7tvyEUzfNBlxSwkp6/HKRqsln7BFXgz902a1 +4EQP4bdIdQ09fJpmX4/cu9ICyJjStxRNqXE9eda8BuXouuOOzARShVNsaQxrLuF 2IWNxhx0Dg2dDZZD3z+7Qdcl9dZdc5+HW1R/G3ZjyvGP9JFJqor8 -----END CERTIFICATE-----Generated at Tue Dec 16 05:18:04 2025 by rpki-client